Security Directory

Hines is a globally recognized, privately held real estate investment, development, and management firm founded in 1957. The company operates in 30 countries with a significant portfolio under management, positioning itself as a leader in the real estate sector. Their services span investment management, real estate services including development, acquisitions, and property management, and private wealth solutions tailored for individual investors. The website reflects a mature, professional business with comprehensive content and a strong global presence.

B

Bauwens GmbH & Co. KG

bauwens.de

54

Bauwens GmbH & Co. KG is a well-established German real estate company with over 150 years of experience in project development, planning, construction, consulting, and property brokerage. The company operates primarily in Germany, focusing on residential, commercial, and mixed-use real estate projects. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, the site uses modern web technologies and a proprietary CMS (Ynfinite), with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data aligns with the company's history and legitimacy, reinforcing trustworthiness. Overall, the website is professional, secure, and compliant with GDPR requirements.

The website edge.com currently serves as a parked domain page indicating the domain may be for sale. There is no active business content or services offered on the site. The domain is a premium, long-registered domain owned by Network Solutions, LLC, a reputable registrar. The site infrastructure relies on basic HTML and JavaScript with multiple third-party advertising and tracking scripts, including Google Adsense and AdsDeli. The site lacks privacy and cookie policies despite extensive tracking, and no contact or business information is provided. Security posture is minimal with no DNSSEC or security headers enabled, and the SSL configuration is basic. Overall, the site is accessible without WAF or blocking but provides limited value beyond domain parking and advertising.

Peter & Paul is a specialized brand agency focused on delivering creative, strategic, and visually compelling brand solutions. With over 20 years of experience, they provide services including brand strategy, design, language, identity, digital branding, motion, and art direction. Their website showcases a portfolio of projects emphasizing their expertise in brand development and campaign execution. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, ensuring good mobile optimization and user experience. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The WHOIS data for the domain queried is unavailable due to domain naming rules, indicating the domain queried is likely a subdomain rather than a registered domain, which slightly reduces trust from a domain registration perspective. Overall, the website is professional and content-rich but would benefit from enhanced security and compliance features.

P

Paessler GmbH

my-prtg.com

77

Paessler GmbH operates a professional website promoting its flagship product, PRTG Hosted Monitor, a cloud-based IT infrastructure monitoring solution hosted on AWS. The company targets IT professionals and managed service providers seeking scalable and flexible monitoring tools. The website demonstrates strong digital maturity with modern technologies, good SEO, and comprehensive content. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registrant data slightly reduces trust but does not detract from the overall legitimacy. Strategic recommendations include publishing detailed security policies and incident response information to enhance transparency and trust.

L

Ludmila Esterková

ludmilaesterkova.cz

50

Ludmila Esterková operates a specialized fine art wedding photography business primarily targeting engaged couples seeking high-quality, artistic wedding photos. The website showcases a professional portfolio emphasizing weddings at prestigious locations, reflecting a niche market position within the hospitality and event photography sector in the Czech Republic. The business model is service-oriented, focusing on personalized photographic experiences throughout the wedding timeline. Technically, the website is built on the Showit platform, leveraging modern web technologies including jQuery and Google Fonts, and is hosted behind Cloudflare which provides security and performance benefits. The site is mobile-optimized and features a clean, elegant design with clear navigation and strong branding consistency. Security posture is robust with HTTPS enforced, Cloudflare bot management, and a comprehensive cookie consent mechanism ensuring GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a mature digital presence suitable for a small professional service provider.

W

Wedding Fields

wedding-fields.com

57

Wedding Fields is a wedding coordination service provider operating primarily in Prague and Italy, boasting 19 years of experience in delivering all-inclusive wedding planning services. The company targets couples seeking comprehensive wedding coordination with an emphasis on value and quality service. The website is built on the Wix platform, featuring a professional design, clear navigation, and good mobile optimization, supporting a positive digital presence. However, the absence of WHOIS registration data raises concerns about domain legitimacy and age, which conflicts with the claimed business history. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks security headers and published security policies. Privacy compliance is limited due to missing privacy and terms of service pages. Overall, the website is safe and trustworthy for general audiences, but improvements in transparency and security practices are recommended.

S

Sitebulb Limited

sitebulb.com

65

Sitebulb Limited operates a specialized SEO software business providing advanced website crawling tools for technical SEO audits. Their flagship products include Sitebulb Desktop and Sitebulb Cloud, catering to a broad audience from freelancers to enterprise teams. The company is well-established with a domain age since 2008 and a strong market presence evidenced by awards, customer testimonials, and partnerships. Technically, the website is modern, performant, and well-optimized for SEO and mobile devices, leveraging Cloudflare DNS and asynchronous analytics scripts. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements could be made by adding DNSSEC and explicit security headers. Privacy compliance is good with clear privacy and cookie policies, though no explicit consent mechanism is detected. Business credibility is high with consistent branding, clear company information, and multiple trust signals. Overall, the website and business demonstrate maturity, professionalism, and reliability.

B

Berghof Process Control & Logistics GmbH

berghof-process-control.com

54

Berghof Process Control & Logistics GmbH is a specialized provider of management systems tailored for logistics terminals, repair workshops, and container yards. Their solutions, such as BLU and IBIS, focus on process control and safety systems, serving a niche market primarily in transportation and logistics sectors. The company is part of the Berghof Group and holds ISO 9001:2015 certification, indicating a commitment to quality management. The website is professionally designed, multilingual, and targets logistics operators and industrial clients. Technically, the website is built on TYPO3 CMS, employs modern web standards, and integrates Google Tag Manager for analytics. It is mobile-optimized and includes GDPR-compliant privacy and cookie consent mechanisms. However, some security headers are missing, which could be improved to enhance security posture. The site uses HTTPS exclusively, ensuring encrypted communications. Security-wise, the site shows good practices such as consent management and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS registration data is a concern for domain legitimacy, but the professional presentation and business consistency mitigate this risk. No incident response or security policy pages were found, suggesting room for improvement in transparency and readiness. Overall, the website presents a credible and professional business presence with moderate technical maturity and good privacy compliance. Strategic improvements in security headers, WHOIS transparency, and incident response information would strengthen trust and security posture.

B

Berghof Umweltengineering

berghof-umweltengineering.com

49

Berghof Umweltengineering is a specialized environmental engineering company focused on the assessment, remediation, and revitalization of large land areas and industrial complexes. The company operates primarily in Germany and is part of the larger Berghof Gruppe. Their key services include contaminated site management, building demolition, land recycling, and soil-related construction supervision. The website is professionally designed, bilingual (German and English), and provides detailed service descriptions and contact information, indicating a medium-sized enterprise with a solid market position in the environmental sector. Technically, the website is built on TYPO3 CMS and uses Piwik (Matomo) for analytics, reflecting a moderate level of digital maturity. The site is mobile-optimized and structured for good user experience, although some improvements in accessibility and SEO could be made. Security-wise, the site uses HTTPS, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. The WHOIS data is notably missing or inaccessible, which raises concerns about domain legitimacy despite the professional appearance and corporate contact details. This discrepancy suggests the need for further verification of domain registration status. Overall, the website presents a trustworthy business front but should address privacy compliance and security best practices to enhance trust and reduce risk.

B

Berghof Fluoroplastic Technology GmbH

berghof-fluoroplastics.com

52

Berghof Fluoroplastic Technology GmbH operates as a specialized manufacturer and supplier of innovative fluoroplastic materials, particularly PTFE-based products. The company positions itself as a technology leader and innovation partner serving diverse industrial sectors including automotive, semiconductor, laboratory, photonics, and medical life sciences. The website reflects a professional B2B business model focused on material solutions and research and development. Technically, the site is built on TYPO3 CMS, employs HTTPS with good SSL configuration, and uses Matomo analytics with a GDPR-compliant cookie consent mechanism. Security posture is solid with encrypted communications and privacy controls, though it lacks some advanced security headers and explicit incident response information. The absence of WHOIS registration data is a notable concern, impacting domain legitimacy verification. Overall, the website is well-designed, content-rich, and trustworthy from a user perspective but would benefit from enhanced transparency in domain registration and security policies.

Tvorbawww.cz is a Czech small business specializing in website creation, e-commerce solutions, CMS, and SEO services with over 9 years of experience. The website content is professionally oriented towards businesses seeking digital presence enhancement in the Czech market. The technical infrastructure relies on older JavaScript libraries and custom CMS solutions, with moderate performance and basic SEO and accessibility features. Security posture is weak due to lack of HTTPS enforcement, missing security headers, and absence of privacy and cookie policies. The domain WHOIS data is unavailable, which reduces trust and raises concerns about domain legitimacy. Overall, the website provides relevant business information but lacks modern security and privacy compliance measures.

Z

Základní umělecká škola Jeseník

zusjes.cz

44

Základní umělecká škola Jeseník is a well-established educational institution in the Czech Republic, providing artistic education in music, literature, drama, and visual arts since 1948. The website serves as a portal for students, parents, and the community to access information about courses, cultural events, and school news. The institution maintains a regional presence with a focus on family and youth engagement through specialized courses and orchestras. Technically, the website is built on the Noteo Engine CMS, uses modern web technologies such as HTML5, CSS, JavaScript, and FontAwesome icons, and is served over HTTPS ensuring secure communication. However, the absence of explicit security headers and privacy policy pages indicates room for improvement in security and compliance. The site includes a cookie consent mechanism that denies ad and analytics storage by default, reflecting a privacy-conscious approach. Contact information is clearly presented, enhancing business credibility. Overall, the website is functional, informative, and trustworthy for its target audience.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) that displays when a webpage cannot be loaded. The page includes embedded scripts and styles for the Chrome Dinosaur offline game. There is no public website content, business information, or user-facing services. The page is not intended as a commercial or informational website but serves as an offline error display within the Chrome browser environment. Consequently, no privacy, cookie, or terms of service policies are present, and no contact or security policies are available. The technical infrastructure is limited to client-side JavaScript and HTML5 Canvas for the game, with no server-side components or hosting details. Security posture is minimal due to the nature of the page, and no external links or analytics are detected.

M

Mercury Marine

mercurymarine.com

68

Mercury Marine is a globally recognized leader in manufacturing propulsion solutions for recreational boats. The website presents a professional and well-structured digital presence, leveraging Adobe Experience Manager as its CMS platform and integrating modern analytics and marketing tools such as Google Tag Manager, Adobe Launch, and Facebook Pixel. The site is optimized for mobile devices and provides multilingual support for a global audience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers are not detected in the HTML source. The absence of WHOIS registration data is notable and warrants further investigation to confirm domain legitimacy. Overall, the website reflects a mature enterprise with a strong market position in the marine transportation sector.

P

Pivovar Zubr

zubr.cz

52

Pivovar Zubr is an established Czech brewery with a strong online presence showcasing its beer products, brewery history, and news updates. The website is built using modern web technologies such as Vue.js and Nuxt.js, providing a responsive and visually appealing user experience. The business model focuses on beer production, direct sales through an e-shop, and brewery tours, targeting beer enthusiasts and local consumers. The domain age and WHOIS data support the legitimacy and longstanding nature of the business. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible privacy policies, terms of service, and security headers, which are areas for improvement. Tracking technologies like Google Analytics and Facebook Pixel are used, indicating moderate user tracking. Overall, the website is professional and trustworthy but could enhance privacy compliance and security posture.

K

KUZA - kufry a zavazadla

kufry-zavazadla.eu

47

KUZA - kufry a zavazadla operates an e-commerce website specializing in branded travel luggage, bags, and accessories targeting Czech and European customers. The business offers a variety of products including textile and plastic suitcases, business bags, backpacks, and travel accessories from well-known European brands. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses common web technologies such as JavaScript, jQuery, Bootstrap, and Google Tag Manager for analytics and marketing. Security measures include CSRF token usage and HTTPS, but lack visible security headers and published privacy policies, indicating room for improvement in security posture and privacy compliance. WHOIS data is not publicly available due to EURid privacy policies, which is typical for .eu domains, but this reduces transparency. Overall, the website is legitimate and functional with moderate trustworthiness.

Plachty.biz is a specialized Czech-language e-commerce website focused on selling tarpaulins, car covers, pool covers, tents, and related protective products. The business operates as a small retail entity with a niche market position, leveraging direct import partnerships to offer quality products. The website content is well-structured with detailed product descriptions and a clear navigation system, although the design is basic and mobile optimization is limited. Technically, the site uses standard web technologies including JavaScript libraries like MooTools and Slimbox, Google Analytics for tracking, and Zopim Live Chat for customer support. Hosting is provided by Aerohosting, with domain registration via Tucows and privacy protection enabled.

D

de'ge'pol deutsche gesellschaft für politikberatung e.V.

degepol.de

60

De'ge'pol deutsche gesellschaft für politikberatung e.V. is a professional association in Germany representing lobbyists and political consultants. Established in 2002, it promotes ethics, transparency, and professionalism in political advocacy. The organization offers networking platforms, events, and training to its members and advocates for democratic principles and transparency in political processes. The website is built on Squarespace, featuring a clean, professional design with good mobile optimization and clear navigation. Security posture is strong with HTTPS and HSTS enabled, though additional security headers could enhance protection. Privacy compliance is well addressed with a cookie consent banner and a clear privacy policy, though terms of service and incident response information are absent. Overall, the site reflects a trustworthy and credible organization with a focus on ethical standards in political consulting.

B

BitQT ™ App - Start Earning Now! - Verified ✅

bitqt.app

57

BitQT.app presents itself as an automated cryptocurrency trading platform targeting individuals interested in leveraging Bitcoin and other cryptocurrencies for profit. The website offers user registration forms collecting personal data and provides a profit calculator tool to entice potential users. The platform claims high accuracy and awards but lacks verifiable certifications or detailed company information. Technically, the site uses common JavaScript libraries and is moderately optimized for mobile and SEO. Security posture is average with no visible advanced security headers or incident response policies. Privacy compliance is minimal with a privacy policy present but no cookie consent mechanism. Overall, the site appears functional but lacks transparency and robust security measures, which may impact user trust.

Springdesign.cz is a Czech graphic design and marketing service provider operating since 1999 under the parent company Ascensus s.r.o. The company offers original graphic design, web design, corporate identity, outsourcing, and marketing psychology services targeting local businesses. The website presents a professional team and partner affiliations but lacks modern digital maturity features such as privacy policies, secure HTTPS, and mobile optimization. Technically, the site uses basic HTML, CSS, and an outdated Google Analytics script loaded insecurely over HTTP, which poses security risks. No contact forms or direct contact information are provided on the site, limiting user engagement and compliance with data protection regulations. Security posture is weak due to missing HTTPS and security headers, and privacy compliance is poor with no cookie or privacy policies. Overall, the site is functional but requires significant improvements in security, privacy, and technical modernization to meet current standards.

F

FLOW Základní umělecká škola

flowzus.cz

48

FLOW Základní umělecká škola is a Czech educational institution specializing in arts education for children and youth, offering programs in music, dance, visual arts, and literary-dramatic disciplines. The school operates multiple branches and provides additional services such as workshops and summer camps, positioning itself as a community-focused provider of creative education. The website reflects a modern, responsive design with clear navigation and relevant content tailored to its audience. Technically, the site uses standard web technologies including Bootstrap and jQuery, with some tracking scripts present but commented out, indicating a cautious approach to user privacy. Security posture is moderate; while HTTPS is presumably enabled, no security headers were detected in the provided data, and no explicit privacy policy page was found, though a cookie consent mechanism is implemented. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness from a domain registration perspective. Overall, the site is professional and functional but would benefit from enhanced security and compliance documentation.

C

CEMS

cemsalumni.net

69

The CEMS Alumni Platform is a professionally maintained website serving the global alumni community of CEMS, a prominent alliance in management education. The platform offers networking opportunities, events, career services, and resources to its members, positioning itself as a key facilitator for alumni engagement and professional development. The website is well-branded, consistent, and targets a specialized audience of alumni, students, and corporate partners primarily in the education and non-profit sectors. Technically, the site leverages modern web technologies including React, Mapbox, and integrates multiple analytics and monitoring tools such as Google Analytics, Amplitude, Datadog, and Sentry. It is hosted on a reliable CDN infrastructure (AWS Cloudfront) and uses Hivebrite as its platform provider. The site demonstrates good mobile optimization and moderate performance, though accessibility and SEO could be further improved. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for bot mitigation. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. The absence of WHOIS data for the domain is a notable anomaly, reducing trust slightly, though the website content and branding appear legitimate and professional. Overall, the platform is a credible and valuable resource for its target audience but would benefit from enhanced privacy compliance measures, improved security headers, and resolution of WHOIS data inconsistencies to strengthen trust and security assurance.

W

WISI Group

wisi.de

71

WISI Group is a medium-sized technology company specializing in network and signal processing solutions aimed at improving network efficiency and performance. The company targets business clients in the technology sector, leveraging innovative products and services. The website is built on WordPress with modern SEO and cookie consent mechanisms, reflecting a moderate level of digital maturity. The technical infrastructure includes a reputable hosting provider and uses HTTPS with valid SSL certificates, ensuring secure communications. However, some security best practices such as DNSSEC and security headers are missing, which could be improved to enhance overall security posture. The website lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. No contact information or incident response details are readily available, limiting direct communication channels. Overall, the site is professional and trustworthy but could benefit from enhanced transparency and security measures.

The website kiss-or-diss.de is operated by DER PUNKT gmbh & kambeckfilm GmbH and offers an interactive service allowing users to create personalized love or dislike video greetings. The business operates in the media sector with a niche focus on interactive video greeting cards. The website content is minimal and primarily relies on Adobe Flash technology, which is deprecated and limits accessibility and security. The site lacks modern mobile optimization and accessibility features, and no privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. Technically, the site uses Google Analytics for tracking but does not implement visible consent mechanisms or security headers. The WHOIS data is consistent with the website's hosting and domain registration, showing no suspicious patterns. Overall, the website has a moderate legitimacy score but suffers from outdated technology and compliance shortcomings.

B

Berghof GmbH

berghof.com

57

Berghof GmbH is a medium-sized, family-owned technology company based in Germany, operating through seven specialized subsidiaries. The company focuses on innovation and knowledge exchange across diverse disciplines, offering products and services in mobility and transport, filtration, industrial applications, laboratory and light measurement technology, environmental solutions, and service & support. Their market position is strong within these sectors, supported by a professional and comprehensive online presence. Technically, the website is built on TYPO3 CMS, uses modern web technologies, and implements Google Analytics and Tag Manager for data collection. The site is well-optimized for mobile and SEO, with good accessibility features. Security posture is solid with HTTPS enforced and cookie consent management in place, though some security headers are missing and no explicit security policy or incident response contacts are published. WHOIS data is unavailable, which is unusual but the website content and linked subsidiary domains strongly support legitimacy. Overall, the website is professional, secure, and compliant with GDPR, serving a business audience effectively.

A

ALMEO s.r.o.

almeo.cz

43

ALMEO s.r.o. is a Czech-based technology company specializing in web development, internet solutions, and software services. Established in 2010, the company offers a comprehensive portfolio including web applications, e-commerce platforms, software development, graphic design, marketing, and technical hosting solutions. Their target audience primarily consists of local businesses seeking tailored internet and software services. The website reflects a small but professional service provider with consistent branding and a clear business focus. Technically, the website is built on a custom CMS called WEBIDEAL and hosted on Forpsi servers. The site uses standard web technologies such as JavaScript, CSS, and XHTML. While the site is accessible and structured with clear navigation, mobile optimization and accessibility are basic. No advanced frameworks or analytics tools are detected, indicating a modest digital maturity level. From a security perspective, the site lacks visible security headers and explicit HTTPS enforcement information, which lowers its security posture. The presence of anti-spam measures in forms is a positive aspect. Privacy compliance is limited, with basic privacy and terms of service pages but no cookie consent mechanisms or GDPR-specific disclosures. Contact information is clearly provided, enhancing business credibility. Overall, ALMEO s.r.o. presents a trustworthy and legitimate business with a solid web presence but would benefit from improvements in security hardening, privacy compliance, and technical modernization to enhance trust and user experience.

The website atomic.com is currently inaccessible due to a PerimeterX Web Application Firewall (WAF) security challenge page that denies access to the actual content. This prevents any direct analysis of the business offerings, contact information, or detailed technical infrastructure. The domain itself is well-established, having been registered since 1994, and is managed by a reputable registrar with multiple domain status protections in place. However, DNSSEC is not enabled, which is a minor security gap. The visible page is minimal and only serves as a bot mitigation mechanism, indicating a strong security posture in terms of access control but limiting transparency. Due to the blocking, no privacy, cookie, or terms of service policies are detectable, nor are any contact details or business descriptions. The site does not expose any sensitive data or vulnerabilities on the accessible page, but the lack of accessible content results in a low overall AI score and limited insights.

S

ZebraStore | ZebraStore - prodej sportovního vybavení

sauconystore.cz

36

ZebraStore.cz is an e-commerce retailer specializing in sports equipment, apparel, and accessories primarily targeting customers in the Czech Republic and Slovakia. The website offers a broad range of products including shoes, clothing, and sporting goods from multiple well-known brands. The business model focuses on online sales with seasonal promotions and a structured product catalog. The website is professionally designed with consistent branding and good content quality, catering to sports enthusiasts and general consumers interested in outdoor and athletic products. Technically, the website employs modern JavaScript frameworks such as Vue.js, utilizes lazy loading for images, and integrates multiple third-party analytics and advertising services including Google Analytics, Facebook Pixel, and Targito marketing tools. The site is mobile optimized and provides a good user experience with clear navigation and search functionality. However, there is room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses secure external scripts but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. The WHOIS data is unavailable, likely due to privacy protection, which reduces transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, ZebraStore.cz presents a moderately secure and professional e-commerce platform with good technical implementation but requires enhancements in privacy compliance, security headers, and transparency to improve trust and regulatory adherence.

ZebraStore is a Czech Republic-based e-commerce retailer specializing in sports equipment, footwear, clothing, and accessories. The website targets sports enthusiasts primarily in the Czech and Slovak markets, offering a wide range of branded products such as Under Armour, Merrell, and Wilson. The platform features a well-structured navigation system and seasonal promotions, positioning itself as a reputable regional player in the sports retail sector. Technically, the website employs modern JavaScript frameworks including Vue.js, utilizes lazy loading for images, and integrates multiple third-party analytics and advertising services such as Google Analytics, Facebook Pixel, and Targito marketing tools. The site is mobile-optimized and demonstrates moderate performance with good SEO practices. However, it lacks visible privacy and cookie policies, which is a compliance gap. From a security perspective, the site enforces HTTPS and includes standard security headers, indicating a good baseline security posture. No exposed sensitive data or vulnerabilities were detected in the HTML content. Nevertheless, the absence of publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms limits transparency and preparedness. Overall, ZebraStore presents a professional and trustworthy online retail presence with room for improvement in privacy compliance and security transparency. Addressing these gaps will enhance user trust and regulatory adherence.

Art Company is a Czech Republic-based creative and production studio specializing in advertising, video production, photography, web development, and marketing services. The company presents itself as a passionate and creative team focused on delivering high-quality content and solutions for its clients. Their portfolio showcases diverse projects, indicating a solid market presence in the creative media sector. The website is built on WordPress with modern web technologies, providing a good user experience and mobile optimization. However, the site lacks privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate with HTTPS and reCAPTCHA implemented, but missing security headers and no explicit security policies reduce the overall security maturity. Contact information is clearly provided, enhancing business credibility.

The website machara.cz is a personal portfolio site for František Machara, a Czech author and musician. It showcases his life stories, short stories, song lyrics, and demo music tracks, targeting an audience interested in Czech language literature and blues rock music. The site is small-scale, non-commercial, and serves as a creative outlet and contact platform. Technically, the site uses basic HTML, CSS, and JavaScript with jQuery, hosted on Websupport servers. It is moderately optimized for mobile and SEO but lacks advanced CMS or frameworks. Security posture is minimal with no published policies or security headers, and no analytics or tracking scripts are present, indicating a privacy-conscious but basic setup. The domain is well aged and consistent with the personal nature of the site, enhancing trustworthiness. Overall, the site is safe, professional, and functional but would benefit from improved privacy and security practices.

A

ALMEO s.r.o.

tvojereklama.cz

41

ALMEO s.r.o. is a Czech-based small technology company specializing in web development, internet solutions, software development, and related services such as graphic design and marketing. The company targets businesses and organizations seeking professional internet presence and software solutions. Their website is built on a custom CMS called WEBIDEAL and provides clear contact information and service descriptions. However, the domain WHOIS data is unavailable, which raises concerns about domain registration legitimacy. The website is accessible without any WAF or blocking mechanisms, but lacks modern security features such as HTTPS enforcement and security headers. Privacy compliance is basic with no visible cookie consent mechanisms. Overall, the site is functional and professional but could benefit from technical and security improvements.

A

ALMEO s.r.o.

pretorien.cz

42

ALMEO s.r.o. is a Czech-based small technology company specializing in web development, internet solutions, and software services. Their website presents a professional business offering including web applications, e-commerce platforms, software development, graphic design, and technical hosting solutions. The company targets businesses and organizations seeking comprehensive internet and software services within the Czech Republic. The site content is well-structured and informative, with clear navigation and contact details, supporting a moderate market position as a local service provider. Technically, the website is built on the WebIdeal CMS platform, utilizing standard web technologies such as JavaScript, CSS, and HTML. While the site is accessible and functional, it shows room for improvement in mobile optimization, accessibility, and modern security practices. No advanced frameworks or analytics tools are detected, indicating a relatively simple technical infrastructure. From a security perspective, the site includes basic anti-spam measures on forms but lacks visible HTTPS confirmation and security headers, which are critical for protecting user data and enhancing trust. The absence of explicit privacy and cookie consent mechanisms suggests potential GDPR compliance gaps. The WHOIS data is unavailable, which raises concerns about domain registration transparency but does not directly contradict the legitimacy of the business as presented on the site. Overall, ALMEO s.r.o. demonstrates a solid business presence with professional offerings but should prioritize enhancing security posture, privacy compliance, and technical modernization to improve trust and resilience against cyber risks.

E

EVMAPA

evmapa.cz

42

EVMAPA.cz operates a specialized platform focused on supporting the electric vehicle ecosystem in the Czech Republic by providing a comprehensive map of charging stations, payment, information, monitoring, and navigation services. The platform targets EV users and charging station operators, offering tools to facilitate immediate charging and station management. The website is well-structured with multilingual support and integrates mapping technology via OpenLayers. The business appears established since 2015, with a clear niche in the energy and transportation sectors within the Czech market. Technically, the site uses standard web technologies and Google Analytics for traffic analysis, with moderate performance and good mobile optimization. Security posture is moderate; while HTTPS is assumed, no explicit security headers or incident response policies are visible, and no direct contact emails or phone numbers are provided. Privacy compliance is basic with cookie consent and terms of service present but no detailed privacy policy or GDPR compliance statements. Overall, the site is professional and trustworthy but could improve security and compliance transparency.

The Cradle to Cradle Products Innovation Institute is a US-based non-profit organization dedicated to advancing sustainable product design and the circular economy through certification and standard development. Established in 2010, it holds a strong market position as a leader in product circularity certification, serving companies of all sizes globally. The website reflects a professional and well-structured digital presence, emphasizing educational content, community engagement, and event promotion. Technically, the site leverages modern web technologies including React-based frameworks and GraphQL APIs, hosted behind Cloudflare DNS services, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements are recommended in DNSSEC adoption and security header implementation. Privacy compliance is partially met with a comprehensive privacy policy but lacks explicit cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with clear branding and active social media engagement.

N

Nomitech

nomitech.com

70

Nomitech is a global enterprise software provider specializing in advanced cost estimating, benchmarking, and BIM collaboration solutions tailored for industries such as construction, oil & gas, mining, utilities, and nuclear sectors. The company serves a broad international client base with over 1500 satisfied customers across more than 60 countries, positioning itself as a key player in the energy and manufacturing technology markets. Their product suite integrates modern technologies including BIM, AI, VR, and big data analytics to enhance project precision and efficiency. Technically, the website is built on Webflow CMS with modern JavaScript frameworks and includes Google Tag Manager for analytics and a cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal vulnerability disclosure mechanisms. The absence of WHOIS registration data reduces domain trustworthiness, though the professional website content and client testimonials support business credibility. Overall, the site demonstrates strong branding, excellent content quality, and good technical implementation, but would benefit from enhanced privacy compliance and security transparency.

R

Royal Institution of Chartered Surveyors

rics.org

67

The Royal Institution of Chartered Surveyors (RICS) is a globally recognized professional body specializing in land, real estate, construction, and infrastructure standards. Established in 1868 and headquartered in the United Kingdom, RICS provides accreditation, training, and professional standards to surveying professionals worldwide. The organization maintains a strong market position as a leader in real estate and surveying sectors, serving a broad audience of industry professionals. Technically, the website employs modern web technologies including Bootstrap 5 and standard web security practices such as HTTPS enforcement and comprehensive security headers. The site is well-optimized for mobile devices and accessibility, providing a professional user experience with clear navigation and rich content. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance with GDPR. From a security perspective, the site demonstrates a mature posture with no detected vulnerabilities or exposed sensitive data. However, it lacks a dedicated security policy or incident response page, which could enhance transparency and readiness. The WHOIS data is unavailable due to privacy protection, which is justified for an organization of this nature. Overall, the site is trustworthy and professionally maintained. The risk assessment is low with no critical issues detected. Strategic recommendations include publishing explicit security and incident response policies and considering a vulnerability disclosure program to further strengthen trust and security culture.

E

Essex Services Group LTD

esglimited.com

52

ESG (Essex Services Group LTD) is an employee-owned company specializing in building services within the construction industry in the United Kingdom. The company emphasizes sustainability, innovation, and employee empowerment, positioning itself as a leader in its market segment. Their services include comprehensive building services solutions, design engineering, project delivery, offsite innovation, and BIM-compliant processes, with a focus on sectors such as residential, commercial, specialist projects, technology, data centres, and life sciences. Technically, the website employs modern front-end technologies including HTML5, CSS3, JavaScript, Swiper.js for carousels, and GLightbox for media display. The site is hosted with GoDaddy.com, LLC and uses HTTPS with a good SSL configuration. Mobile optimization and SEO practices are good, though accessibility features are basic. No CMS or backend platform was detected from the provided data. From a security perspective, the website benefits from HTTPS and domain registration protections but lacks DNSSEC and visible security headers. There is no published security policy or incident response contact information, and no vulnerability disclosure mechanism is present. Privacy compliance is strong with comprehensive privacy and cookie policies and an active cookie consent banner. No contact emails or phone numbers are directly listed, with contact primarily via a form. No suspicious or malicious content was detected. Overall, ESG's website is professional, trustworthy, and well-aligned with its business goals. Recommendations include enabling DNSSEC, implementing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure program to enhance security posture and trust.

M

Mott MacDonald

mottmac.com

80

Mott MacDonald is a global, employee-owned consultancy specializing in engineering, management, and development solutions across sectors such as energy, transport, water, and buildings. The company positions itself as a transformative partner delivering excellence through innovative and sustainable infrastructure projects worldwide. The website reflects a mature, enterprise-level digital presence with comprehensive service descriptions and a strong brand identity. Technically, the website leverages modern web technologies including EPiServer CMS, cloud-based content delivery via AWS Cloudfront, and advanced analytics tools like Google Tag Manager and Microsoft Application Insights. The site is well-optimized for performance, mobile responsiveness, and accessibility, indicating a high level of digital maturity. From a security perspective, the site enforces HTTPS and uses telemetry for monitoring, but lacks explicit security headers and a public vulnerability disclosure policy. No exposed sensitive data or vulnerabilities were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. However, direct contact information for security incidents or data protection officers is not publicly available. Overall, the website presents a low-risk profile with strong business credibility and technical robustness. The main risk lies in incomplete WHOIS data, which is likely due to privacy protection but slightly reduces transparency. Strategic recommendations include enhancing security headers, publishing incident response contacts, and implementing a vulnerability disclosure mechanism to further strengthen trust and security posture.

R

RKD

rkd.ie

67

RKD is a well-established international architecture firm based in Ireland, founded in 1997. The company specializes in design-led, technically robust architecture services, serving a diverse client base across Europe. Their market position is strong, supported by a comprehensive portfolio of high-profile projects and a professional online presence. The website reflects a mature digital infrastructure built on WordPress, enhanced with modern performance and SEO optimizations. Security posture is good with HTTPS and domain transfer protections, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is basic but present, with cookie consent and a privacy policy. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its target audience of clients seeking architectural services.

K

Kreativagentur Herr Kaplan

herrkaplan.at

57

Kreativagentur Herr Kaplan is a small, regionally focused creative agency based in Klagenfurt, Austria, specializing in marketing, branding, advertising, social media, and web design services. The website presents a professional image with clear descriptions of their key services and a portfolio showcasing client projects. The business targets local businesses and organizations seeking comprehensive creative solutions. Technically, the website uses modern web technologies including JavaScript, CSS, and integrates Usercentrics for GDPR-compliant cookie consent and Google Analytics for visitor tracking. The site is mobile optimized with good navigation and content quality. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are absent and no explicit security or incident response policies are published. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

D

DER PUNKT GmbH

scriptrocker.de

39

DER PUNKT GmbH is a medium-sized digital and classical media agency based in Karlsruhe, Germany, specializing in web development, TYPO3 CMS integration, PHP programming, and video-based content management systems. The company serves a diverse client base ranging from local businesses to large corporations such as BASF and Commerzbank. Their website targets experienced developers for recruitment and showcases their portfolio of projects. Technically, the site uses a modern stack including PHP, MySQL, JavaScript, and integrates Google Analytics and Facebook SDK for marketing and analytics. However, the absence of HTTPS is a significant security gap. The site implements GDPR-compliant cookie consent via Klaro but lacks explicit security policies or incident response information. Overall, the website is professional and trustworthy but requires improvements in security and technical implementation to enhance user trust and compliance.

J

Jobimeo

jobimeo.de

38

Jobimeo is a German technology platform offering a free video application creation tool for job seekers. The website provides users with the ability to record webcam videos, upload resumes, and receive tips to enhance their job applications. The platform targets individuals seeking to differentiate themselves in the job market through personalized video presentations. Technically, the site uses JavaScript and Matomo analytics, with a moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partially met with a GDPR-compliant privacy policy but no cookie banner. Overall, the site is professional and trustworthy but could improve in security and compliance transparency.

D

DER PUNKT GmbH − Agentur für Design & Lösung

arbeitgeberleben.de

41

Arbeitgeberleben is a German-based small media agency specializing in employer branding and HR communication through authentic storytelling and multimedia content production. The company operates under DER PUNKT GmbH and offers services including workshops, video and photo production, and social media content management to help companies present themselves attractively to potential employees. The website is professionally designed with good content quality and clear navigation, targeting businesses seeking to enhance their employer brand digitally. Technically, the site uses modern web standards, Google Tag Manager for analytics, and Klaro for cookie consent, hosted on kasserver.com. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the site scores well on business credibility and privacy compliance but could improve security practices and formal policies.

Š

ŠKO-ENERGO

sko-energo.cz

63

ŠKO-ENERGO is a financially stable energy company providing comprehensive energy solutions primarily for ŠKODA AUTO and the city of Mladá Boleslav. The company focuses on producing and distributing environmentally friendly energy using carbon-free technologies, offering industrial energy services and energy consumption reduction consulting. The website reflects a professional corporate presence with clear branding and a focus on compliance and privacy. Technically, the site employs modern tools such as Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for security, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is well-structured, mobile-optimized, and compliant with GDPR requirements, though WHOIS data is unavailable, likely due to privacy protection. The absence of direct contact emails or phone numbers on the main site suggests contact is managed via forms or dedicated pages.

ONI system operates a vehicle monitoring and fleet management platform accessible via web and mobile applications. The service targets vehicle owners, fleet managers, partners, and dealers, offering functionalities such as vehicle tracking, controlling access, and demo testing without hardware installation. The website is functional and provides login portals for different user types but lacks visible contact or compliance information. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and integrates Google Analytics and Lead Forensics for tracking. However, security headers are absent, and no privacy or cookie policies are presented, indicating gaps in compliance and security best practices. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is safe and professional in content but requires improvements in transparency, security, and compliance to enhance trust and user confidence.

SkodaTour.eu is a multilingual website dedicated to organizing annual meetings and events for Škoda car owners and enthusiasts, primarily coordinated by the Autoklub Škoda in Mladá Boleslav, Czech Republic. The site serves as a community hub for these events, which rotate locations across Europe and emphasize social, technical, and tourist engagement among Škoda fans. The business model focuses on event organization and community building within a niche automotive enthusiast segment. Technically, the website employs older JavaScript libraries such as MooTools and jQuery, with no modern CMS or frameworks detected. The site is hosted by Web4U s.r.o., a Czech hosting provider. Performance and mobile optimization are basic, with limited accessibility and SEO features. No analytics or tracking tools are present, indicating minimal user tracking. From a security perspective, the site lacks visible HTTPS enforcement and security headers, and no privacy or cookie policies are provided, indicating poor privacy compliance. No contact or incident response information is available, limiting transparency and user trust. The site content is safe for general audiences, with no adult or explicit material detected. Overall, the website is functional but basic, with moderate trustworthiness due to consistent regional hosting and content alignment. However, significant improvements are needed in security, privacy compliance, and contact transparency to enhance user trust and regulatory adherence.

The website economyrun.cz serves as the official portal for the Škoda Economy Run, an annual fuel efficiency competition organized by Škoda Auto a.s. and its affiliated automotoklub. The site provides detailed event information, historical results, media galleries, and links to related resources. It targets automotive enthusiasts and participants interested in eco-friendly driving competitions, leveraging Škoda's brand and community engagement. Technically, the site is built on Joomla! CMS with JavaScript libraries such as MooTools and jQuery, offering a moderately performant and navigable user experience, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS usage but lacks explicit security headers and vulnerability disclosures. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is credible and trustworthy, supported by a long domain registration history and clear association with Škoda Auto.

M

Marissa Tau a.s.

futurumkolin.cz

54

Obchodní centrum Futurum Kolín is a medium-sized retail shopping center located in Kolín, Czech Republic, operated by Marissa Tau a.s. The website presents a professional and well-structured digital presence showcasing its 55 shops, 11 restaurants, and parking facilities. The site targets general shoppers and local residents, providing event information, gift cards, and navigation aids. Technically, the website uses modern JavaScript libraries, cookie consent management, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and explicit incident response policies. WHOIS data is unavailable, likely due to privacy protection, but the site’s professional appearance and partner links indicate legitimacy. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with room for improvement in security best practices and contact transparency.